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IN THE CLAIMS: 

Pending claims follow: 



1 . (Currently Amended) A system for management of a 
network of devices and resources available to the devices via a computer network^ 
comprising: 

a network directory defining a hierarchical tree structure containing 
nodes corresponding to the network of devices and defining control settings 
corresponding to and to be enforced upon the resources available to the devices; 

a directory server in communication with the network directory to 
facilitate accessing data from and storing data to the network directory, the data 
relating to the nodes of the hierarchical tree structure corresponding to the devices 
and to the control settings corresponding to the resources; and 

an end node corresponding to each device in the network of devices 
and resources corresponding to the device, the end node being in communication 
with the directory server and the resources corresponding to the device, the end 
node being adapted to enforce the control settings corresponding to the resources 
contained in the network directory, 

wherein the control settings corresponding to the resources of each 
device are selectively inherited down the hierarchical tree structure of the network 
directory and wherein the control settings are determined at each end node* 

wherein a management console is in communication with the 
network directory and the directory server for providing a user interface, the 
management console being adapted to selectively display the hierarchical tree 
structure and the control settings stored in the network directory. 
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wherein at least one control setting is a scheduled task and wherein 
the end node causes -performance of the task when the scheduled task is to be 
performed, 

wherein the scheduled task is an anti-virus-related task . 

2. (Cancelled) 

3. (Original) The system for management of a network of devices and 
resources via a computer network according to claim 1 , wherein the end node 
dynamically calculates the control setting of the selected node by reading the 
control settings of nodes along a path of nodes from a root of the hierarchical tree 
structure down to the selected node and wherein the end node overwrites 
previously written control settings upon reading conflicting control settings at 
each node along the path of nodes. 

4. (Original) The system for management of a network of devices and 
resources via a computer network according to claim 1 , wherein the end node 
dynamically calculates the control setting by reading from the control settings of 
the end node up to the control settings of a root of the hierarchical tree structure. 

5. (Currently Amended) The system for management of a network of 
devices and resources via a computer network according to claim 1 , wherein each 
control setting includes is se l e ct ed - from - th e- group - c o nsi s tin g o f a configuration 
rule and athe scheduled task. 

6. (Cancelled) 
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7. (Currently Amended) A method for management of a network of 
devices and resources available to the devices via a computer network, 
comprising: 

for each device of the network of devices, calculating control 
settings to be enforced by the device upon the resources corresponding to the 
device, 

wherein the calculating is performed by the device by accessing data 
stored in a network directory defining a hierarchical tree structure containing 
nodes, each node corresponding to a device of the network of devices and 
defining control settings corresponding to and to be enforced upon the resources 
available to the corresponding device and wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network directory^ 

wherein the hierarchical tree structure and the control settings stored 
in the network directory for one of the devices are selectively displayed by a 
management console, the management console being in communication with the 
network directory and the directory server, the management console providing a 
user interface at the corresponding device. 

wherein when the control setting is a scheduled task, further 
comprising causing performance of the task by the end node when the scheduled 
task is to be performed, 

wherein the scheduled task is an anti-virus-related task . 

8. (Original) The method for management of a network of devices and 
resources via a computer network according to claim 7, further comprising 
enforcing the control settings by the device upon the resources available to the 
device. 
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9. (Cancelled) 

10. (Currently Amended) The method management of computer 
application via a computer network according to claim 98, further comprising 
dynamically calculating the control settings of a selected node of the hierarchical 
tree structure by the device. 

L I . (Original) The method management of computer application via a 
computer network according to claim 10, wherein the dynamic calculating 
includes reading control settings of nodes along a path of nodes from a root of the 
hierarchical tree structure down to the selected node and overwriting previously 
written control settings upon reading conflicting control settings at each node 
along the path of nodes. 

12. (Original) The method management of computer application via a 
computer network according to claim 10, wherein the dynamic calculating 
includes reading control settings of nodes along a path of nodes from the control 
setting of the selected node up to the control settings of a root of the hierarchical 
tree structure. 

13. (Currently Amended) The method of management of a network of 
devices and resources via a computer network according to claim 7, wherein each 
control setting includes iG selootod from tho group consisting of a configuration 
rule and athe scheduled task. 

14. (Cancelled) 
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15. (Original) A method for management of a network of devices and 
resources via a computer network according to claim 7, further comprising 
selectively transmitting data from a software repository of the directory server to 
the device. 




1 6. (Currently Amended) A computer program product for management 
of a network of devices and resources available to the devices via a computer 
network, comprising: 

for each device of the network of devices, computer code that 



calculates control settings to he enforced by the device upon the resources 
corresponding to the device, wherein the calculating is performed by the device by 
accessing data stored in a network directory defining a hierarchical tree structure 
containing nodes, each node corresponding to a device of the network of devices 
and defining control settings corresponding to and to be enforced upon the 
resources available to the corresponding device and wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network directory; and 

a computer readable medium that stores said computer codes^ 

wherein the hierarchical tree structure and the control settings stored 
in the network directory are selectively displayed via a user interface, 

wherein when the control setting is a scheduled task, further 
comprising computer code that causes performance of the task by the end node 
when the scheduled task is to be performed, 

wherein the scheduled task is an ant i -virus-related task , 

1 7. (Original) The computer program product for management of a 
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network of devices and resources via a computer network according to claim 16, 
further comprising computer code that enforces the control settings upon the 
corresponding device and resources available to the device. 

18. (Cancelled) 

1 9. (Currently Amended) The computer program product for 
management of a network of devices and resources via a computer network 
according to claim 4:816, further comprising computer code that dynamically 
calculates the control setting of a selected node of the hierarchical tree structure 
by the corresponding device. 

20. (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 19, 
wherein the computer code that dynamically calculates includes computer code 
that reads control settings of nodes along a path of nodes from a root of the 
hierarchical tree structure down to the selected node and computer code that 
overwrites previously written control settings upon reading conflicting control 
settings at each node along the path of nodes. 

21 . (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 19, 
wherein the computer code that dynamically calculates includes computer code 
that reads control settings of nodes along a path of nodes from the control settings 
of the selected node up to the control settings of a root of the hierarchical tree 
structure. 
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22. (Currently Amended) The computer program product for 
management of a network of devices and resources via a computer network 
according to claim 16, wherein each control setting include s is s e l e c t ed from tho 
group con s i s ting of a configuration rule and ethe scheduled task. 

23. (Cancelled) 

24. (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 1 6, 
further comprising computer code that selectively transmits data from a software 
repository of the directory server to the device via the end node corresponding to 
the device. 

25. (Currently Amended) A computer program product for management 
of a network of devices and resources available to the devices via a computer 
network, comprising: 

computer code that contains a network directory defining a 
hierarchical tree structure containing nodes corresponding to the network of 
devices and defining control settings corresponding to and to be enforced upon the 
resources available to the devices; 

computer code that facilitates communication between a directory 
server and the network directory to facilitate accessing data from and storing data 
to the network directory, the data relating to the nodes of the hierarchical tree 
structure corresponding to the devices and to the control settings corresponding to 
the resources; 

computer code that facilitates communication between the device 
and the directory server and the resources corresponding to the device, the device 
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22. (Currently Amended) The computer program product for 
management of a network of devices and resources via a computer network 
according to claim 16, wherein each control setting includes i3 Goloctod from tho 
group consisting of a configuration rule and a the scheduled task. 

23. (Cancelled) 

24. (Original) The computer program product for management of a 
network of devices and resources via a computer network according to claim 16, 
further comprising computer code that selectively transmits data from a software 
repository of the directory server to the device via the end node corresponding to 
the device. 

25. (Currently Amended) A computer program product for management 
of a network of devices and resources available to the devices via a computer 
network, comprising: 

computer code that contains a network directory defining a 
hierarchical tree structure containing nodes corresponding to the network of 
devices and defining control settings corresponding to and to be enforced upon the 
resources available to the devices; 

computer code that facilitates communication between a directory 
server and the network directory to facilitate accessing data from and storing data 
to the network directory, the data relating to the nodes of the hierarchical tree 
structure corresponding to the devices and to the control settings corresponding to 
the resources; 

computer code that facilitates communication between the device 
and the directory server and the resources corresponding to the device, the device 
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computer code being adapted to enforce the control settings corresponding to the 
resources contained in the network directory, wherein the control settings 
corresponding to the resources of each device are selectively inherited down the 
hierarchical tree structure of the network directory; and 

a computer readable medium that stores said computer codes A 

wherein the hierarchical tree structure and the control settings stored 
in the network directory are selectively displayed, and computer code that 
selectively displays is in communication with the network directory and the 
directory server and provides a user interface, 

wherein when the control setting is a scheduled task, further 
comprising computer code that causes performance of the task by the end node 
when the scheduled task is to be performed. 

wherein the scheduled task is an anti-virus-related task . 

26. (New) The system for management of a network of devices and 
resources via a computer network according to claim 1, wherein broad control 
settings are set higher in the tree while lower level control settings are set at a 
level of one of the devices. 

27. (New) The system for management of a network of devices and 
resources via a computer network according to claim 26, wherein the broad 
control settings require the scanning of all executable files for viruses, cleaning of 
the files if possible, quarantining of the files if the files can not be cleaned upon 
detecting a virus, and sending infection reports to a network administrator. 

28. (New) The system for management of a network of devices and 
resources via a computer network according to claim 27, wherein a mid-level 
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control setting is set to report all infections to a local administrator. 

29. (New) The system for management of a network of devices and 
resources via a computer network according to claim 28, wherein the lower level 
settings require the deletion of infected files of said one of the devices. 

30. (New) The system for management of a network of devices and 
resources via a computer network according to claim 29, and further comprising a 
get policy component that obtains relevant policies, a first cache for caching an 
output of the get policy component, a calculate policy component that calculates 
an inheritance with the output received from the first cache and transmits the 
inheritance to a second cache, wherein the information in the first cache is 
updated based on a time stamping. 
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